Windows – How to change file permissions when you don’t have permission to change file permissions

This is a lot of conversation over a very simple process. I would give you command line options, but recursive junction points can be a problem. So, the most straight forward way to do this is with native Windows tools.

These are Windows 10 instructions. I have added Windows 7 notes.

1. Open File Explorer and right-click the E: drive. Choose Properties
2. Click the Security tab and then click the Advanced button.
3. Next to where it shows the Owner click Change. (Windows 7: Click the Owner tab, click Edit, then click Other users or groups.)
4. In the Select User or Group window, type Administrator and click Check Names. If you did it correctly Administrator will be underlined. Click OK.
5. Check the box Replace owner on subcontainers and objects
6. Click Apply

WAIT. WAIT. WAIT. WAIT some more. When done, click OK and close the Advanced Security Settings for Local Disk E: window.

Now:

1. Repeat steps 1 and 2 above.
2. Under the Permission entries window, click the Add button.
3. Next to Principal click Select a principal. (Windows 7: Click Change Permissions, then click Add.)
4. In the Select User or Group window type Everyone and click Check Names. If you did it properly, Everyone will be underlined. Click OK.
5. In the Basic permissions area, check the box next to Full control and click OK.
6. Check the box next to Replace all child object permission entries with inheritable permission entries from this object
7. Click Apply.

WAIT. WAIT. WAIT. Wait some more. When it's done, click OK to close the Advanced Security Settings for Local Disk (E:) window.

NOTE: If you receive any security warnings prompting asking you to allow changes, click Yes or Allow.

You now have full access of every file on the E: drive.

You could use setacl to replace the orphaned SIDs with a new one. For example, use the following to replace your old SID with the new one:

setacl.exe -on C:\ 
           -ot file 
           -actn trustee -trst "n1:S-old-501;n2:S-new-501;ta:repltrst" 
           -rec cont